Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/jIJo9TtUo7vzObmS0XfxfxtbafI.roa
File: jIJo9TtUo7vzObmS0XfxfxtbafI.roa (raw, json)
Hash identifier: Vz+YA71sxuFWNsKHT1wRqusSyV1EF8JXE7KbTy1/zZo=
Subject key identifier: 8C:82:68:F5:3B:54:A3:BB:F3:39:B9:92:D1:77:F1:7F:1B:5B:69:F2
Certificate issuer: /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial: 01A15D118E7328C37105BE8E7F6493FA42D9
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/jIJo9TtUo7vzObmS0XfxfxtbafI.roa
Signing time: Wed 21 Oct 2026 06:06:34 +0000
ROA not before: Wed 21 Oct 2026 06:06:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211602
IP address blocks: 93.190.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:11:8e:73:28:c3:71:05:be:8e:7f:64:93:fa:42:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Validity
Not Before: Oct 21 06:06:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c8268f53b54a3bbf339b992d177f17f1b5b69f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6c:28:2c:4d:17:2a:45:8c:3f:ca:2b:d1:a5:
49:18:65:45:b1:ee:78:d0:fb:4b:c8:12:2f:5f:3c:
50:70:db:a3:63:c8:07:29:ee:82:60:2b:f4:67:a0:
fd:3f:96:0c:94:de:53:aa:99:a2:07:42:0e:b7:ce:
1f:d7:01:f8:97:e2:5b:da:64:9e:01:0a:6f:43:13:
56:55:85:a3:76:94:01:84:72:46:9e:a0:85:2a:cf:
f0:67:9f:de:5a:87:c6:0f:34:fe:fd:ce:cc:7f:18:
d9:04:62:bc:73:db:fe:5a:36:74:a1:31:d7:88:ab:
ef:46:36:ab:5c:82:d8:73:5f:20:20:43:0e:fd:57:
ee:ce:85:92:1d:b5:ce:71:7e:0f:6b:11:93:d2:6a:
56:08:b6:84:89:c5:2b:d6:a5:ec:7d:e8:6e:09:4b:
5e:a1:29:0f:7e:11:da:0f:e4:0f:87:b8:ff:5e:4a:
67:db:6f:04:67:80:1e:92:b1:62:68:2a:e5:3f:f5:
8e:de:16:8f:ed:85:dd:50:02:ee:fd:37:28:e9:c0:
4e:f5:52:a9:9c:66:d9:d8:b1:72:86:ef:50:01:d4:
d0:69:15:a1:d0:0a:09:09:5c:72:c9:ca:a1:00:ab:
c6:2b:60:ff:cc:4b:ca:64:39:bf:12:b1:dc:62:93:
7b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:82:68:F5:3B:54:A3:BB:F3:39:B9:92:D1:77:F1:7F:1B:5B:69:F2
X509v3 Authority Key Identifier:
keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/jIJo9TtUo7vzObmS0XfxfxtbafI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.122.0/24
Signature Algorithm: sha256WithRSAEncryption
13:a6:f1:05:f6:fd:eb:63:99:96:78:5c:59:28:18:b4:e0:81:
64:4a:19:56:94:82:d8:6b:45:a7:04:48:b6:5e:8d:8d:5f:0e:
09:a5:dd:49:e2:1b:57:db:52:a3:58:78:a7:b9:48:f4:51:5e:
41:e7:7c:4d:8e:ec:74:14:d3:91:58:ff:28:f3:b9:7f:90:e8:
a0:54:62:2f:13:c5:bf:b0:e1:37:f2:d2:90:11:2f:f3:49:33:
b7:da:f0:7b:5a:e0:6a:d1:c6:f5:de:48:4a:e8:69:fd:c0:76:
da:21:74:58:69:e2:05:3c:5a:4a:5c:be:fb:20:9a:2d:a1:54:
dd:df:7e:46:09:45:94:b3:bb:0b:f5:c6:58:24:8f:ce:f7:37:
23:e4:b6:5b:af:77:e2:c6:1a:dd:99:89:5b:eb:82:b5:c3:c6:
55:23:6c:a1:a4:cc:be:b9:28:44:1e:58:15:8b:63:0d:73:ea:
b3:7b:d3:8f:ec:15:44:7c:7f:b6:24:3d:72:af:14:c0:64:d9:
7e:f7:b3:10:1b:27:82:09:df:ec:34:c2:e0:48:02:d9:09:67:
a5:06:ea:b1:c0:f1:8c:99:92:b2:24:cd:02:53:24:d5:0d:b9:
0b:78:f8:34:49:14:74:a5:9e:36:88:f9:74:4c:8a:8e:de:b6:
43:77:59:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 13:12:42 2026 by rpki-client